Recording URLs publicly available
# support
k
Hey team, During the early stages of an implementation with Vapi, I realized that recordings are publicly available at their respective URLs. While there's a high degree of entropy in those IDs, if the IDs are exposed, people can openly access the files on your server. Is this an acknowledged risk, and if so, is there a plan to change this? Given some of the content that is making its way into these recordings, it's likely that people (myself included) will have questions
c
Hi there, Thank you for your message. Our team is currently out of the office. We operate Monday through Friday, from 9:00 AM to 8:00 PM Pacific Standard Time (PST). We’ll get back to you as soon as possible during our normal business hours. If your message is urgent, please mark it accordingly or include “URGENT” in the subject line, and we’ll do our best to respond promptly. Warm regards, Vapi Customer Support Team
Hey Kyle, Yes, by default, Vapi recordings are public. To make them private, you can use your own custom storage. Documentation: [https://docs.vapi.ai/assistants/call-recording#custom-storage](https://docs.vapi.ai/assistants/call-recording#custom-storage) Best, Vapi Support
k
That's great, thanks for the point in the right direction
c
No worries! If you face any further issues, feel free to create a new ticket.